525 matches found
CVE-2007-1042: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in news.php in Xpression News X-News 1.0.1, when magicquotesgpc is disabled, allows remote attackers to include arbitrary files or obtain sensitive information via a .. dot dot in the xnews-template parameter. NOTE: the provenance of this information is unknown;...
CVE-2007-1019: Undefined Security Weakness
SQL injection vulnerability in news.php in webSPELL 4.01.02, when registerglobals is enabled, allows remote attackers to execute arbitrary SQL commands via the showonly parameter to index.php, a different vector than CVE-2006-5388...
webSPELL 4.01.02 - showonly Blind SQL Injection
webSPELL 4.01.02 - showonly Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print "\n \'/ "; print "\n -.- "; print "\n -------------------oOO------OOo-------------------"; print "\n | webSPELL v4.01.02 showonly Remote SQL Injection |"; print "\n | works only...
CVE-2006-6996
Multiple cross-site scripting XSS vulnerabilities in warforge.NEWS 1.0 allow remote attackers to inject arbitrary HTML and web script via the 1 title and 2 newspost parameters to a newsadd.php, and the 3 name, title, and 4 comment parameters to b news.php, a different set of vectors than...
CVE-2006-6996
Multiple cross-site scripting XSS vulnerabilities in warforge.NEWS 1.0 allow remote attackers to inject arbitrary HTML and web script via the 1 title and 2 newspost parameters to a newsadd.php, and the 3 name, title, and 4 comment parameters to b news.php, a different set of vectors than...
CVE-2006-6996: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in warforge.NEWS 1.0 allow remote attackers to inject arbitrary HTML and web script via the 1 title and 2 newspost parameters to a newsadd.php, and the 3 name, title, and 4 comment parameters to b news.php, a different set of vectors than...
Curium CMS News.PHP SQL注入漏洞
Curium CMS是一款基于PHP的WEB应用程序。 Curium CMS不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'News.PHP'脚本对用户提交的'cid'参数缺少过滤，提交恶意SQL脚本代码作为参数数据，可更改原来的SQL逻辑，导致获得敏感信息。 dB Masters Multimedia Curium CMS 1.03 目前没有解决方案提供： http://www.dbmasters.net/index.php?id=18...
CVE-2007-0765: Undefined Security Weakness
SQL injection vulnerability in news.php in dB Masters Curium CMS 1.03 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2006-6542
The CVE covers an SQL injection in the news.php script of Fantastic News, affecting version 2.1.4 and earlier. The vulnerability arises from unsafely handling the id parameter, enabling remote attackers to execute arbitrary SQL commands. This can impact confidentiality, integrity, and availabilit...
CVE-2006-6542: Undefined Security Weakness
SQL injection vulnerability in news.php in Fantastic News 2.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
Fantastic Scripts Fantastic News远程文件包含漏洞
Fantastic News是一款基于PHP的新闻管理程序。 Fantastic News不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'news.php'脚本对用户提交的'CONFIGscriptpath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Fantastic Scripts Fantastic News 2.1.3 http://fscripts.com/free.php?id=1 http://www.example.com/Script...
Fantastic News 2.1.4 (news.php) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================ Fantastic News 2.1.4 news.php Remote SQL Injection Exploit ============================================================ !perl use IO::Socket; dc3.dl.am if...
Fantastic News 2.1.4 (news.php) Remote SQL Injection Exploit
No description provided by source. !perl Download:http://fscripts.com/download.php?file=1 use IO::Socket; dc3.dl.am if @ARGV3 else &get; sub get $host=$ARGV0; $path=$ARGV1; $id=$ARGV2; $socket=IO::Socket::INET-newProto="tcp",PeerAddr="$host",PeerPort=80 or die "-Error\n"; print "Connecting!\n";...
Fantastic News 2.1.4 - news.php SQL Injection
Fantastic News 2.1.4 - news.php SQL Injection !perl Download:http://fscripts.com/download.php?file=1 use IO::Socket; dc3.dl.am if @ARGVnewProto="tcp",PeerAddr="$host",PeerPort=80 or die "-Error\n"; print "Connecting!\n"; print "Getting Data!\n"; print $socket "GET...
Torbstoff News 4 (pfad) Remote File Inclusion Vulnerability
No description provided by source. ================================================================= Torbstoff News 4 = pfad Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://www.torbstoff.de | |...
news7 <= (news.php) Remote File Inclusion Exploit
======================================================================= news7 = news.php Remote File Inclusion Exploit ======================= ======================================================================= ======================== Bug in :news.php Vlu Code :...
CVE-2006-5282
SH-News 3.1 and earlier is affected by multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to trigger arbitrary PHP code execution by supplying a URL in the scriptpath parameter to one of five pages: report.php, archive.php, comments.php, init.php, or news.php. The iss...
CVE-2006-5282: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 report.php, 2 archive.php, 3 comments.php, 4 init.php, or 5 news.php...
CVE-2006-4794
Multiple cross-site scripting XSS vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script or HTML via the query string PATHINFO in 1 contact.php, 2 download.php, 3 admin.php, 4 fpw.php, 5 news.php, 6 search.php, 7 signup.php, 8 submitnews.php, and 9 user.php. NOTE: the...
CVE-2006-4673
Global variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the extract function on the superglobals, which allows remote attackers to conduct SQL injection attacks via the SERVERREMOTEADDR parameter to news.php...